Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/8838f495-19dc-3208-b134-913ccfce4c58.roa
File:                     8838f495-19dc-3208-b134-913ccfce4c58.roa (raw, json)
Hash identifier:          vnacyYoPzoimCTrIYr9GN5u6n0uoBo9ChdYncvjl+WU=
Subject key identifier:   BB:AD:EC:DF:56:80:D7:19:8F:D9:AA:3A:64:A4:3A:76:A1:70:BC:47
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F43285840593F3F88350BDD6C1DDB0680
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/8838f495-19dc-3208-b134-913ccfce4c58.roa
Signing time:             Fri 23 Dec 2022 12:00:00 +0000
ROA not before:           Fri 23 Dec 2022 12:00:00 +0000
ROA not after:            Sun 24 Dec 2023 05:00:00 +0000
asID:                     200329
IP address blocks:        2602:fd50:1030::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:59:3f:3f:88:35:0b:dd:6c:1d:db:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Dec 23 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2023 GMT
        Subject: CN=47393370-6edb-48fb-a612-53841cd7c7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5a:bf:40:25:09:ba:6c:69:b8:45:4e:a9:36:
                    a0:73:2d:cc:b6:ff:fc:08:ee:59:7e:54:29:8e:4e:
                    c7:1c:a2:f2:20:f9:da:c9:b5:39:3f:45:77:90:e4:
                    14:d8:f2:fb:e9:45:a0:07:8f:e3:53:26:c1:f0:f8:
                    6e:23:8b:a2:cc:eb:f4:07:e5:84:5d:8f:fa:39:72:
                    01:aa:d2:d6:cf:aa:14:07:ef:ae:89:cc:2f:62:51:
                    35:02:60:15:5e:28:fb:4e:a9:dc:56:bf:2d:16:ba:
                    23:5d:9f:b3:c2:dc:91:27:ce:b3:97:da:f2:4b:59:
                    b3:43:3b:5e:1a:75:bf:26:ab:34:61:17:14:53:67:
                    07:b5:72:ef:fd:eb:86:bc:46:bb:3b:34:5c:9b:dc:
                    64:45:3f:a9:65:c3:a8:e7:e6:79:50:61:3f:37:0e:
                    e7:e6:99:47:b7:94:64:91:01:9a:20:46:d8:42:2c:
                    be:0a:bc:36:9a:36:53:2a:9f:23:66:5b:f5:6c:c7:
                    3d:22:85:76:0a:44:d0:f7:14:8b:92:a3:79:b4:9a:
                    bd:41:9c:33:c9:cd:41:7e:1b:f5:f0:44:44:c9:de:
                    3e:c3:56:36:b6:9f:9a:b4:cf:64:a2:64:a9:e3:86:
                    5d:8c:7d:7e:0d:79:5d:69:5c:16:1b:e2:09:e1:0b:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AD:EC:DF:56:80:D7:19:8F:D9:AA:3A:64:A4:3A:76:A1:70:BC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/8838f495-19dc-3208-b134-913ccfce4c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:1030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:cf:c1:1d:91:5b:ec:af:2d:f9:f4:04:6c:bb:0b:99:60:d3:
         eb:96:d8:19:b9:21:49:8f:2a:97:96:f0:d4:3f:01:08:a1:cb:
         10:9d:61:61:c3:2a:98:49:46:7e:5e:cb:ad:00:ac:72:be:20:
         95:ec:c5:40:64:10:ee:fb:75:db:47:24:ff:7f:fb:65:0d:8c:
         5f:f0:02:03:74:c9:a1:7b:57:c2:8a:fb:e3:04:51:4d:d6:62:
         86:2c:4f:87:c7:c8:94:79:27:c6:4d:30:fd:e3:9c:08:a7:a2:
         d3:5b:ea:9e:2f:f6:29:49:03:11:24:a5:f9:ea:95:8b:9d:e2:
         a1:90:c2:c6:86:b1:fc:eb:48:39:07:e9:59:5d:7a:9b:1b:5d:
         56:6c:57:e4:6f:17:75:4f:b1:9d:cb:cb:09:25:3e:37:b0:1f:
         80:cb:d8:18:b7:04:ea:e3:33:83:e4:ba:42:bc:ff:c0:42:f9:
         71:78:f4:55:18:67:e0:f3:e8:e2:ce:b9:da:d8:35:cb:8a:be:
         16:71:27:3f:52:e2:10:54:49:05:11:bf:27:18:f5:27:33:99:
         69:3f:e5:20:41:05:28:d5:70:78:1c:5f:22:b9:ee:e4:ff:97:
         1c:28:3f:53:4b:d1:90:db:d1:48:30:33:65:0c:e9:b0:83:e0:
         f1:8b:5f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----